CVE-2020-10657 - The Proofpoint Insider Threat Management Server (formerly ObserveIT Server) before 7.9.1 contains a vulnerability in the ITM web console's ImportAlertRules feature

Back Back to CVE browser

HIGH

The Proofpoint Insider Threat Management Server (formerly ObserveIT Server) before 7.9.1 contains a vulnerability in the ITM web console's ImportAlertRules feature

Published Jan 6, 2021

7.2

HIGH

CVSS 3.1

EPSS 2.65%

Description

The Proofpoint Insider Threat Management Server (formerly ObserveIT Server) before 7.9.1 contains a vulnerability in the ITM web console's ImportAlertRules feature. The vulnerability allows a remote attacker (with admin or config-admin privileges in the console) to execute arbitrary code with local administrator privileges. The vulnerability is caused by improper deserialization.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-502

Deserialization of Untrusted Data

References (3)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-3104
Advisory
https://www.proofpoint.com/us/blog
x_refsource_MISCProduct
https://www.proofpoint.com/us/security/security-advisories/pfpt-sa-2020-0003
x_refsource_CONFIRMVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-3104		Advisory
https://www.proofpoint.com/us/blog		x_refsource_MISCProduct
https://www.proofpoint.com/us/security/security-advisories/pfpt-sa-2020-0003		x_refsource_CONFIRMVendor Advisory